Automating McAfee Virus Scan Exclusions

So i wanted to share with the community a function I wrote to assist in the automating of virus scan exclusions. In Windows 2008 R2, we were able to import a reg file with the exclusion so it wasn't a big deal. However, we are using 2012 R1/R2
with our Lync 2013 deployment and this option is no longer available to me. The team in charge of the central AV management servers (whatever it is called) are not offering to assist in loading a policy in their management server for our Lync deployment.
Inserting a ton of exclusions manually for over hundred servers (that is just a single customer) isn't something I would be willing to do manually, not to mention things would get missed. I made this relatively generic so it should work (I think)
for other people. It sends key strokes to the OS to accomplish as I couldn't find another way. I haven't found anyone who has a solution so I wrote this one. I could be much much more involved in identifying which roles or what the server
is (SQL, DC, SharePoint, etc), but I am not sure I want to spend that kind of time. Maybe in the future.
Note: My "One Access Scanner" is listed fourth in the Virus Scan Console. If yours is not, this will need some tweaking. This isn't really an appropriate solution (I just hack this stuff together), but it works.
Things you need to know.
Single file or single directory exclusions go into the array $Procs
File Types go into $FileTypes
Any directory that you want the sub directory to be excluded as well goes into $ProcIncludingSubs
Function SetAVExclusions ()
$ErrorActionPreference = "silentlycontinue"
Function GetActiveWindows ()
# sample script to query winapi GetForegroundWindow and GetWindowText
Add-Type @"
// **** every time you make a change to this class, you have to restart powershell session or change class name to new name ****
using System.Runtime.InteropServices;
using System.Text;
public class Win51
[DllImport("user32.dll", SetLastError = true)]
static extern System.IntPtr FindWindow(string className, string windowName);
[DllImport("user32.dll", SetLastError = true)]
static extern System.IntPtr FindWindowEx(System.IntPtr parentHandle, System.IntPtr childAfter, string className, string windowTitle);
[DllImport("user32.dll")]
static extern System.IntPtr GetForegroundWindow();
[DllImport("user32.dll")]
static extern int GetWindowText(System.IntPtr hWnd, System.Text.StringBuilder text, int count);
[DllImport("user32.dll")]
static extern System.IntPtr GetWindow(System.IntPtr hWnd, uint uCmd);
[DllImport("user32.dll")]
static extern bool SetForegroundWindow(System.IntPtr hWnd);
enum UCmd
GW_CHILD = 5,
GW_ENABLEDPOPUP = 6,
GW_HWNDFIRST = 0,
GW_HWNDLAST = 1,
GW_HWNDNEXT = 2,
GW_HWNDPREV = 3,
GW_OWNER = 4
public string getForegroundWindowTitle()
const int nChars = 256;
System.Text.StringBuilder Buff = new System.Text.StringBuilder(nChars);
System.IntPtr handle = getForegroundWindow();
if (GetWindowText(handle, Buff, nChars) > 0)
return Buff.ToString();
return null;
// returns null / 0 if find window fails
public System.IntPtr findWindow(System.IntPtr hWndParent,System.IntPtr hWndChildAfter, string lpszClass, string lpszWindow)
System.IntPtr handle = FindWindowEx(hWndParent,hWndChildAfter, lpszClass, lpszWindow);
// System.IntPtr handle = FindWindow(lpszClass, lpszWindow);
return handle;
public System.IntPtr getForegroundWindow()
System.IntPtr handle = GetForegroundWindow();
return handle;
public bool setForegroundWindow(System.IntPtr hWnd)
return setForegroundWindow(hWnd);
public System.IntPtr getWindow(System.IntPtr hWnd, uint uCmd)
return GetWindow(hWnd,uCmd);
$winObj = New-Object Win51
$text = $winObj.getForegroundWindowTitle();
return $text
} #End Function GetActiveWindows
$Procs = @("{%}Systemroot{%}\system32\GroupPolicy\registry.pol",` # Corporate Defaults
"{%}allusersprofile{%}\NTUser.pol",` #KB822158
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Edb*.log",`
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Edb.chk",` #KB822158
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Edbres00001.jrs",`
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Edbres00002.jrs",`
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Res1.log",`
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Res2.log",`
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Tmp.edb ",` #KB822158
"{%}windir{%}\SoftwareDistribution\Datastore\datastore.edb",` #KB822158
"{%}windir{%}\security\*.chk",`
"{%}windir{%}\security\*.edb",`
"{%}windir{%}\security\*.log",`
"{%}windir{%}\security\*.sdb",`
"{%}windir{%}\security\database\Security.sdb",`
"C:\quarantine",`
"{%}systemroot{%}\System32\GroupPolicy\Machine\Registry.pol", ` #KB822158
"{%}systemroot{%}\System32\GroupPolicy\User\Registry.pol", ` #KB822158
"{%}windir{%}\security\database\*.edb",` #KB822158
"{%}windir{%}\security\database\*.sdb",` #KB822158
"{%}windir{%}\security\database\*.log",` #KB822158
"{%}windir{%}\security\database\*.chk",` #KB822158
"{%}windir{%}\security\database\*.jrs",` #KB822158
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Edb*.jrs",` #KB822158
"{%}windir{%}\Ntds\Ntds.dit",` #KB822158 - AD DCs
"{%}windir{%}\Ntds\Ntds.pat",` #KB822158 - AD DCs
"{%}windir{%}\Ntds\ED*.log",` #KB822158 - AD DCs
"{%}windir{%}\Ntds\Res*.log",` #KB822158 - AD DCs
"{%}windir{%}\Ntds\Edb*.jrs",` #KB822158 - AD DCs
"e:\Ntds\Ntds.dit",` #KB822158 - AD DCs
"e:\Ntds\Ntds.pat",` #KB822158 - AD DCs
"e:\Ntds\ED*.log",` #KB822158 - AD DCs
"e:\Ntds\Res*.log",` #KB822158 - AD DCs
"e:\Ntds\Edb*.jrs",` #KB822158 - AD DCs
"{%}windir{%}\Ntfrs\jet\sys\edb.chk",` #KB822158 - AD DCs
"{%}windir{%}\Ntfrs\jet\ntfrs.jdb",` #KB822158 - AD DCs
"{%}windir{%}\Ntfrs\jet\log\*.log",` #KB822158 - AD DCs
"{%}systemroot{%}\Sysvol\Staging areas\Nntfrs_cmp*.*",` #KB822158 - AD DCs
"e:\Sysvol\Staging areas\Nntfrs_cmp*.*",` #KB822158 - AD DCs
"{%}systemroot{%}\System32\Dns\*.log",` #KB822158 - AD DCs
"{%}systemroot{%}\System32\Dns\*.dns",` #KB822158 - AD DCs
"ABServer.exe", ` # Begin Lync 2013 Exclusions
"AcpMcuSvc.exe", `
"ASMCUSvc.exe", `
"AVMCUSvc.exe", `
"ChannelService.exe", `
"ClsAgent.exe", `
"ComplianceService.exe", `
"DataMCUSvc.exe", `
"DataProxy.exe", `
"FileTransferAgent.exe", `
"IMMCUSvc.exe", `
"LysSvc.exe", `
"MasterReplicatorAgent.exe", `
"MediaRelaySvc.exe", `
"MediationServerSvc.exe", `
"MRASSvc.exe", `
"OcsAppServerHost.exe", `
"ReplicaReplicatorAgent.exe", `
"ReplicationApp.exe", `
"RtcHost.exe", `
"RTCSrv.exe", `
"XmppProxy.exe", `
"XmppTGW.exe", `
"Fabric.exe", `
"FabricDCA.exe", `
"FabricHost.exe", `
"{%}ProgramFiles{%}\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\SQLServr.exe", `
"{%}ProgramFiles{%}\Microsoft SQL Server\MSRS11.MSSQLSERVER\Reporting Services\ReportServer\Bin\ReportingServicesService.exe", `
"{%}ProgramFiles{%}\Microsoft SQL Server\MSAS11.MSSQLSERVER\OLAP\Bin\MSMDSrv.exe", `
"{%}ProgramFiles{%}\Microsoft SQL Server\MSSQL11.LYNCLOCAL\MSMQL\Binn\SQLServr.exe", `
"{%}ProgramFiles{%}\Microsoft SQL Server\MSSQL11.RTCLOCAL\MSMQL\Binn\SQLServr.exe", `
"{%}systemroot{%}\System32\LogFiles", `
"{%}systemroot{%}\SysWow64\LogFiles", `
"{%}programfiles{%}\Microsoft Lync Server 2013", `
"{%}programfiles{%}\commonfiles\Microsoft Lync Server 2013", `
"{%}ProgramFiles{%}\Microsoft Lync Server 2013\Web Components\Mcx\Ext", `
"{%}ProgramFiles{%}\Microsoft Lync Server 2013\Web Components\Mcx\Int", `
"{%}ProgramFiles{%}\Microsoft Lync Server 2013\Web Components\Ucwa\Int", `
"{%}ProgramFiles{%}\Microsoft Lync Server 2013\Web Components\Ucwa\Ext", `
"{%}systemroot{%}\Windows\Microsoft.NET\Framework64\v4.0.30319\Config", `
"{%}ProgramFiles{%}\Microsoft System Center 2012 R2\Server\Health Service State",` #Begin SCOM 2012 R2 Exclusions
"{%}ProgramFiles{%}\System Center Operations Manager\Gateway\Health Service State",`
"{%}ProgramFiles{%}\Microsoft Monitoring Agent\Agent\Health Service State",`
"CShost.exe","Microsoft.Mom.Sdk.ServiceHost.exe","HealthService.exe","MonitoringHost.exe",`
"e:\WAC_Server_Cache","e:\WAC_Server_Logs","e:\WAC_Server_Rendering_Cache"` # WC Server storage locations
# This section will exlude file types
$FileTypes = @("MDF","LDF")
# This section will include sub folders in the exclusion. Path must end in a \
$ProcIncludingSubs = @("{%}programfiles{%}\Microsoft Lync Server 2013\", `
"{%}systemroot{%}\RtcReplicaRoot\", `
"{%}SystemDrive{%}\RtcReplicaRoot\", `
"E:\RtcReplicaRoot\xds-replica\", `
"{%}systemroot{%}\assembly\", `
"{%}systemroot{%}\ServiceProfiles\", `
"{%}systemroot{%}\Windows\Microsoft.NET\", `
"{%}systemroot{%}\system32\inetsrv\", `
"{%}systemroot{%}\system32\LogFiles\", `
"{%}systemroot{%}\SysWOW64\inetsrv\", `
"{%}systemroot{%}\SysWOW64\LogFiles\", `
"{%}systemroot{%}\System32\Dns\Boot\",` #KB822158 - AD DCs
"{%}programfiles{%}\Common Files\Microsoft Lync Server 2013\Watcher Node\" `
$TotalExclusionsinFunction = $Procs.Length + $FileTypes.Length + $ProcIncludingSubs.Length
$TotalExclusionsinRegistry = ((Get-Item -Path 'HKLM:\SOFTWARE\Wow6432Node\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default\').Property -match "ExcludedItem_").count
If ($TotalExclusionsinFunction -eq $TotalExclusionsinRegistry)
Write-Host ""
Write-Host "`tChecking Anti-Virus Exclusions in the Registry"
Write-Host ""
Write-Host "`t`tStatus : " -ForegroundColor White -NoNewline
start-sleep -m 500
Write-Host "Count Matches" -ForegroundColor Yellow
Write-Host ""
Write-Host "`t`t`tThe number of exclusions in this script match the number of exclusions in the registry" -ForegroundColor Yellow
Start-Sleep 5
return $true
[void] [System.Reflection.Assembly]::LoadWithPartialName("'Microsoft.VisualBasic")
[void] [System.Reflection.Assembly]::LoadWithPartialName("'System.Windows.Forms")
Write-Host "`tDisabling Artemis (Hueristic Scanning)" -ForegroundColor Cyan
$VConsole = Get-Process -Name mcconsol -ErrorAction SilentlyContinue
$VConsole1 = Get-Process -Name shcfg32 -ErrorAction SilentlyContinue
If (($VConsole -ne $null) -or ($VConsole1 -ne $null))
If ($VConsole -ne $null)
$VConsole.CloseMainWindow() | Out-Null
If ($VConsole1 -ne $null)
Stop-Process -Processname shcfg32 -ErrorVariable "AOS" -Force
If ($AOS)
Write-Host "`tForce Close Failed - Taking Extrodinary Actions (~20 Secs)" -ForegroundColor Yellow
If ($ActiveApp -eq "On-Access Scan Properties")
[System.Windows.Forms.SendKeys]::SendWait("{ESC}{ESC}{ESC}{ESC}{ESC}")
$ActiveApp = GetActiveWindows
$Count = 0
Write-Host "`t`t`t[" -ForegroundColor Yellow -NoNewline
while (($ActiveApp -ne "On-Access Scan Properties") -and ($Count -lt 10))
[Microsoft.VisualBasic.Interaction]::AppActivate("On-Access Scan Properties")
start-sleep 1
[System.Windows.Forms.SendKeys]::SendWait("{ESC}{ESC}{ESC}{ESC}{ESC}")
Start-Sleep 1
$Count++
$ActiveApp = GetActiveWindows
Write-Host "*" -ForegroundColor Green -NoNewline
Write-Host "]" -ForegroundColor Yellow
$VConsole1 = Get-Process -Name shcfg32 -ErrorAction SilentlyContinue
If ($VConsole1 -ne $null)
Write-Host "`t`tIssue Closing the App"
Pause
Else
start-sleep -m 500
& 'C:\Program Files (x86)\McAfee\VirusScan Enterprise\SHCFG32.EXE'
Write-Host "`t`tClosing all McAfee Windows"
start-sleep -m 500
& 'C:\Program Files (x86)\McAfee\VirusScan Enterprise\SHCFG32.EXE'
Else
& 'C:\Program Files (x86)\McAfee\VirusScan Enterprise\SHCFG32.EXE'
Start-Sleep 2
# Setting Hueristic Settings to disabled
Write-Host "`t`tGrabbing focus of window [On-Access Scan Properties]"
[Microsoft.VisualBasic.Interaction]::AppActivate("On-Access Scan Properties")
start-sleep 1
$ActiveApp = GetActiveWindows
Write-Host "`t`tCurrent Focus is $ActiveApp"
If ($ActiveApp -ne "On-Access Scan Properties")
Write-Host "`t`tUnable to get Focus On-Access Scan Properties"
$Count = 0
start-sleep -m 300
while (($ActiveApp -ne "On-Access Scan Properties") -and ($Count -lt 10))
$Count++
Write-Host "`t`t`t`tTrying again: $Count of 10 times"
[Microsoft.VisualBasic.Interaction]::AppActivate("On-Access Scan Properties")
start-sleep -m 750
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "On-Access Scan Properties")
Write-Host "`t`tUnable to grab focus of [On-Access Scan Properties]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
$KeyboardArray1 = "%S","{UP}","{UP}","{UP}","{UP}","{UP}","{UP}","{TAB}","{TAB}","{TAB}","{ENTER}"
ForEach ($z in $KeyboardArray1)
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "On-Access Scan Properties")
Write-Host "`t`tUnable to keep focus on [On-Access Scan Properties]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
[System.Windows.Forms.SendKeys]::SendWait($z)
start-sleep -m 300
start-sleep 2
# Start Exclusions
Write-Host "`tStarting VirusScan Exclusions" -ForegroundColor Cyan
$VConsole = Get-Process -Name mcconsol -ErrorAction SilentlyContinue
$VConsole1 = Get-Process -Name shcfg32 -ErrorAction SilentlyContinue
If (($VConsole -ne $null) -or ($VConsole1 -ne $null))
If ($VConsole -ne $null)
$VConsole.CloseMainWindow() | Out-Null
If ($VConsole1 -ne $null)
Stop-Process -Processname shcfg32 -Force
Write-Host "`t`tClosing all McAfee Windows"
start-sleep -m 500
& 'C:\Program Files (x86)\McAfee\VirusScan Enterprise\SHCFG32.EXE'
Else
& 'C:\Program Files (x86)\McAfee\VirusScan Enterprise\SHCFG32.EXE'
Start-Sleep 2
# Removing all On Access Scanner Exclusions
Write-Host "`t`tGrabbing focus of window [On-Access Scan Properties]"
[Microsoft.VisualBasic.Interaction]::AppActivate("On-Access Scan Properties")
start-sleep 1
$ActiveApp = GetActiveWindows
Write-Host "`t`tCurrent Focus is $ActiveApp"
If ($ActiveApp -ne "On-Access Scan Properties")
Write-Host "`t`tUnable to get Focus On-Access Scan Properties"
$Count = 0
start-sleep -m 300
while (($ActiveApp -ne "On-Access Scan Properties") -and ($Count -lt 10))
$Count++
Write-Host "`t`t`t`tTrying again: $Count of 10 times"
[Microsoft.VisualBasic.Interaction]::AppActivate("On-Access Scan Properties")
start-sleep -m 750
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "On-Access Scan Properties")
Write-Host "`t`tUnable to grab focus of [On-Access Scan Properties]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
$KeyboardArray1 = "%S","{TAB}","{DOWN}","+{TAB}","+{TAB}","+{TAB}",,"+{TAB}","{RIGHT}","+{TAB}","+{TAB}","+{TAB}",,"+{TAB}","{RIGHT}","%E"
#[System.Windows.Forms.SendKeys]::SendWait("{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{DOWN}{TAB}{TAB}{TAB}{RIGHT}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{RIGHT}%E")
ForEach ($z in $KeyboardArray1)
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "On-Access Scan Properties")
Write-Host "`t`tUnable to keep focus on [On-Access Scan Properties]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
[System.Windows.Forms.SendKeys]::SendWait($z)
start-sleep -m 300
start-sleep 2
# Removing exclusions 150 times.
Write-Host "`t`tRemoving existing virus exlcusions (up to 150)"
[Microsoft.VisualBasic.Interaction]::AppActivate("Set Exclusions")
start-sleep 5
$ActiveApp = GetActiveWindows
Write-Host "`t`tCurrent Focus is $ActiveApp"
If ($ActiveApp -ne "Set Exclusions")
Write-Host "`t`tUnable to get Focus on Set Exclusions"
$Count = 0
start-sleep -m 300
while (($ActiveApp -ne "Set Exclusions") -and ($Count -lt 10))
$Count++
Write-Host "`t`t`t`tTrying again: $Count of 10 times"
[Microsoft.VisualBasic.Interaction]::AppActivate("Set Exclusions")
start-sleep -m 750
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "Set Exclusions")
Write-Host "`t`tUnable to grab focus of [Set Exclusions]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
For ($i=1;$i -lt 150; $i++)
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "Set Exclusions")
Write-Host "`t`tUnable to keep focus on [Set Exclusions]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
[System.Windows.Forms.SendKeys]::SendWait("%R")
start-sleep 1
# Processing the different Directories and process
ForEach ($y in $ProcIncludingSubs)
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "Set Exclusions")
Write-Host "`t`tUnable to keep focus on [Set Exclusions]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
[System.Windows.Forms.SendKeys]::SendWait("%A{TAB}$y{TAB}{ADD}{ENTER}")
Start-Sleep -m 200
ForEach ($y in $Procs)
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "Set Exclusions")
Write-Host "`t`tUnable to keep focus on [Set Exclusions]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
[System.Windows.Forms.SendKeys]::SendWait("%A{TAB}$y{ENTER}")
Start-Sleep -m 200
ForEach ($y in $FileTypes)
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "Set Exclusions")
Write-Host "`t`tUnable to keep focus on [Set Exclusions]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
[System.Windows.Forms.SendKeys]::SendWait("%A%F{TAB}$y{ENTER}")
Start-Sleep -m 200
[System.Windows.Forms.SendKeys]::SendWait("{ENTER}{TAB}{TAB}{TAB}{ENTER}")
start-sleep 1
Stop-Process -Processname shcfg32 -Force | Out-Null
$TotalExclusionsinRegistry = ((Get-Item -Path 'HKLM:\SOFTWARE\Wow6432Node\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default\').Property -match "ExcludedItem_").count
If ($TotalExclusionsinRegistry -ne $TotalExclusionsinFunction)
Write-Host "`t`tUpdate appears to have failed" -ForegroundColor Yellow
Start-Sleep 1
Return $False
Return $True
} #End Function

Similar Messages

Using Windows GPO to automatically run McAfee Virus Scan

Is it possible to write a GPO to run Virus scan automatically?

Hi Scot Triplett,
Based on my understanding, you would like to automatically run McAfee Virus Scan via GPO. Right?
You can create a scheduled task to run a batch file which is set to run McAfee Virus Scan. As for how to configure a scheduled task, please refer to the following article:
Configure a Scheduled Task Item
As for the batch file, please refer to the following article:
How to run a VirusScan Enterprise On-Demand Scan task from a command prompt
https://kc.mcafee.com/corporate/index?page=content&id=KB60684
Note:
Since the websites are not hosted by Microsoft, the links may change without notice. Microsoft does not guarantee the accuracy of this information.
Regards,
Lany Zhang

Itunes stops McAfee Virus Scan

I have isolated a file in Itunes and it is stopping my virus scan from proceeding and locks up my brower (actually locks up my entire system). I am using McAfee Virus Scan, have updated it as required.
The file that seems to be stopping the process is:
c:/program files\itunes.resources\fr.lproj\Placards.nib\objects.xib
If I let the virus scan run, it functions until it gets to this file then everything just comes to a standstill.
I have even run the online McAfee Virus Scan and it too gets to this file and stalls and the system is locked up.
Anyone have any idea?
Thanks for your help.
Jeff

Try posting in the iTunes Windows Discussions.
This is an issue with McAfee and not iTunes.
MJ

VISS (McAfee) virus scan error at 7%

Error message:"Problem: Product configuration XML file missing". Running the online Troubleshooter produces the same error message for: 'Anti-Spam', 'Personal Firewall', 'Site Advisor', 'Security Center', 'Quick Clean & Shredder', and 'Virus Scan'. Thinking this was a problem with the McAfee software, I reinstalled the Security Suite, but got the same result. Using Windows 7. VISS has been working normally until today's error messages. How do I correct this?

Thank you very much for your response. I will try that this morning.
After posting my message, I discovered that my 'Windows Updater' encounters 'unknown problem' and stops update, so I'm not current on my Windows updates - I may have more of a problem than just with VISS - may require a professional technician to resolve. But, in any case, thanks for your help.
Ben

McAfee Virus Scan VShieldScanner in Root

I decided to try out a trial version of Virus Scan months ago. One day, while looking at the Activity Monitor, I saw up to 4 tasks that were running in the background, 3 of which are called "VShieldScanner". These tasks belong to Virus Scan (which I only ran once), so I deleted the application using App Delete. ClamXAV was good enough for my virus concerns.
After emptying the trash and restarting the computer, the tasks were all still running. I tried to reinstall and delete again, and the same result happened. So now, I've got processes going on that I don't even need, for a program that I deleted. The processes are all under "root" as the user, so I can't change it. I read elsewhere that I can grant myself admin rights via the terminal, or download some type of GUI to access root. Did anyone else have this issue?
By the way, here's what Activity Monitor says:
Process IDs: 400,401,402
Real Memory: About 23 MB each
Virtual Memory: About 611.50 MB each
Deleting the processes via Force Quit only results in the process that was just deleted to pop back up in the Activity Monitor seconds later.

that program has an uninstaller and you should have used that. the easiest thing is to redownload the program and use the uninstaller.
https://knowledge.mcafee.com/article/664/8328353f.SALPublic.html

Conflicting results from McAfee virus scan

I ran a Full Scan on my Windows XP computer using Verizon Internet Security Suite powered by McAfee. It took about 5 hours but eventually it told me Your computer is secure (no action required). 0 Viruses detected in your last scan. Then I clicked View Security Report, and that said it had detected 4 Viruses and 81 Trojans. Why the difference? Also, there was no way to display a list of what was found and their locations. Anyone else had that kind of problem with the McAfee tool? I have run McAfee Virtual Technician, it didn't find anything wrong.

I ran the full scan again, same conflicting result. I think the Security Report doesn't just report on the scan just completed, it reports some or all of the prior scans. If this is the case it should say so.

Uninstalling Mcafee virus scan from Lion

I'm trying to install a Norton antivirus product, however the installer tells me that I cannot install it on my hard drive because I already have "incompatible antivirus software" installed on it, and it lists McAfee VirusScan. I had McAfee on it previously, however I have run the Unistaller provided by Mcaffee. I thought this had removed the program, however there are still clearly remnants of it somewhere on the drive. Does anyone have experience with this and is willing to help?

Removing all traces of anti-virus software is often difficult. In your case, you need to go to the McAfee site, not the Norton site, to search for a manual uninstall process.
Try: https://kc.mcafee.com/corporate/index?page=content&id=KB54975
However, I agree with others in not recommending Norton as a replacement. If you feel that you need an anti-virus software to detect you from no known Mac viruses in the wild, try ClamXav. At least it's free.

I cannot get adobe reader to download on an Acer Aspire 1 using Win 7 and Mcafee virus scan and firewall?

as sta.ted above i cannot download the Reader software from the Adobe website.there is nothing saved in nthe Windows downloads folder nor is there any sign of the Downloads box. We hnave W7 on the pc so know what to expect. Have even tried saving it in ano9ther location. Stil no good. Currently have the new Firefox and Windows and Mcaffe dowloads are happening automatically. Any ideas? Using an Acer Aspire one netbook

Try to boot the computer in Windows Safe mode with network support (press F8 on the boot screen) as a test to see if that helps to download the Adobe Reader file.
*http://windows.microsoft.com/en-US/windows7/Advanced-startup-options-including-safe-mode
If that still fails then you will have to use another computer to download the file and use an USB stick too transfer the file.

Which is better and newer, virus scan 6 or pc cillin 2000?

which is better and newer, mcafee virus scan v6 or pc cillin 2000?
thanks,
edison

edison,
I run without a Virus Smasher Program. If I am going to download something I run Housecall. Also I do not use Outlook or Outlook Express for email so I do not get those types of attacks.
You could try Housecall here:
Trend Micro's free online virus scanner
This thing is a browser plugin. Does not run unless you are on their site. It is Free. It does not take up any recourses. It is Free. It is always up to date. It is Free. It never expires. It is Free. You never need to register to use it. Oh, and did I mention it is FREE!!! :D
Take Care,
Richard

P30 shuts down when running virus scan and other apps

Hi,
I've got a Satellite P30-110. Lately it has started to shutdown without warning and power off. When I start it back up again it loads normally without a scandisk.
It first started when I was using FAST via crossover cable. It would shutdown shortly after starting to gather the files. Then it started happening when I tried to run a virus scan using McAfee VirusScan 9. Now it also happens when I try to encode video.
I have tried doing all of the above after starting in Safe Mode, running msconfig and disabling all startup items and normally. Still I get the exact same result.
I have not installed any new hardware or software. I have updated my BIOS to v1.3. My notebook is plugged in when this happens. I have enough HD space. I just don't have a clue as to whats happening!! Please help!

Hi there, The simplest way is to use a vacuum cleaner hose on the fan grills as described in an earlier post. However, if ther is a lot of dust and debris stuck in the heat sink then it may be necessary to remove the heat sink first. This can be done by removing the cover on the bottom of the notepad (adjacent to the fan grilles), and then remove the screws holding the heat sink in place.
Note that the heat sink will be attached with contact paste to help the heat dispersal. Please don't forget to power off the PC first, and also make sure that there is sufficient contact paste when refitting the hest sink.
HTH

Virus Scan for SAP XI , J2EE configuration

Hi Experts,
We have a virus scan interface NW-VSI provided by SAP. Different AV products are now producing and certifying for this and providing the Virus Scan Adapter and Virus scan engine integrated with SAP NW system.
We can use this to scan viruses. I have gone through so many documents for this.
Can any one please help me how can do this ?
A step by step guide or complete scenario will be very helpful.
We have installed McAfee antivirus in an other different server.
our requirement is before picking up the file by XI from FTP location , a virus scan should run.
Please help me how can I achive this and what are the requirements for this in J2EE engine side etc.
Thanks
Viny

Hi Vineet,
yes this can be possible. I have implemented this in our project.
you can have a look in to this -
http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/f0096909-7121-2e10-ad89-8e08b609bf4b
Thanks
Sugata B Majumder

Why does the Flash player update push me to install McAfee Security Scan Plus?

When Flash asks me if I want to update, it takes me to an Adobe page to update it, but there is a checkbox already checked to install McAfee Security Scan Plus. I already have an anti-virus program installed. Why does the flash update page assume that I want to install this software?

Generally this occurs because there's a third-party plug-in that affects how the JavaScript on the page got executed. Ghostery, AdBlock Pro and NoScript are common candidates.
Under normal operating conditions, you should see an opt-out dialog like the one below. While cost-recovery measure are a reality for a product that is tremendously expensive to develop and distribute free of charge, the intent is absolutely to allow you to opt out.
If you want to avoid the download and installation experience for Flash altogether, switch to a browser that includes Flash Player as a built-in component, like Google Chrome or Internet Explorer on Windows 8 and higher.

Virus Scan profile activated - implications?

Hello.
we have a custom program that makes IDOCS into PDF's and then emails them.
if the Virus Scan profile /SCMS/KPRO_CREATE is not activated it fails saying that it isnt activated.
There is Note 1382313 that states not to activate it, only if you need it activate it.
So we do need it and activated it now but what else is now scanned as well?
And how come its needed when we create documents? So far I have only found it to be needed for incoming objects?
Thanks for thinking!
Andi

Though the profile is active, you need a virus scanner.
you need External Virus Scanner to be setup in the VSCAN--> Servers.
Few Virus Scanners are McAfee, Avira, and http://www.bowbridge.de/index.php?id=31&L=1
BowBridge.
Once the setup is done, use VSCANPROFILE---> Activate it and use VSCANTEST to test sample antivirus.
After the activation only the docuemnts which are using the profile are scanned, the idea is when you upload a documet to SAP then it is scanned.
Thanks
SM

McAfee Security Scan Plus

New computer, installed Firefox, went to get Flash Player for Firefox.
Install the plugin, Firefox warning comes up about software trying to be installed, click "allow", install window pops up, 3;2;1, click install.
Adobe Download Manager comes up downloads Flash Player, Adobe Flash install programs starts, need to close Firefox to continue
Flash installed, McAfee Security Scan Plus installed.....
Huh? What? McAfee Security Scan Plus????
Their was no notification that McAfee Security Scan Plus was going to be installed. Their was no check box.
I am an IT guy. I dont get viruses. I dont fall for scams. I dont get phished. I dont click "yes" on anything that pops up on my screen. I fix all my family and freinds computers. I build my own computers, I havent bought a premade pc from a company in over 15 years. I am a Linux system admin.
When I install software, like Flash player, I read everything that pops up on my screen, except for the full EULA.
I cant wait till HTML5 becomes standard. Then the world can rid itself of this resource hog and now apprently also a virus.
Adobe Flash did not notify me McAfee Security Scan Plus was being installed untill after it was installed.

I'm another IT guy, and I did NOT get the normal Flash install screen with the McAfee junk checkbox. I've learned long ago to watch for it, especially with Adobe products.
I run a utility on my system that watches the Startup paths in the operating system, and notifies me when something wants to install itself to start automatically. That gives me option to say "no," and keep my system running fast a smooth. Well, Adobe has even worked its way around that kind of protection. Their products now scan for available updates in the background when they are running, then use the system's Shut Down process to put their updater in the "RunOnce" key of the Registry! Then when you reboot, even though you KNOW you didn't authorize any Adobe product to auto-start, up comes their updater. But I digress....
This time I was browsing with Firefox, and a Flash page said my player was out of date. Click the link to update it. The download started immediately, with no option to opt out of anything.
Surprise! McAfee Security Scan Plus pops up so it can do its fake scan and try to get me to buy something. McAfee used to be the flagship anti-virus out there. It was fast, unobtrusive, and just did the job. But McAfee lost sight of it's original purpose, and now, in their attempts to become a one-package security solution, McAfee has become a bloated, sluggish system hog like Norton. And like Adobe. They all deserve to just die.
McAfee has resorted to Adware to make sales, and uses scare tactics to get you to buy. They have obviously partnered with Adobe with a deal to make money for both of them. (Norton, also, has now resorted to scareware sales tactics, BTW.) Why are they doing this? Because Microsoft came out with Security Essentials, which is free. And it provides better protection with far less system load because it integrates with the operating system.
I dropped Adobe Acrobat a long time ago. If there were a good alternative Flash player, I would dump Adobe player in a second. In half a second. This kind of bloatware sales partnership garbage is unacceptable. There are other multimedia formats out there. Maybe the world will wake up one day and stop using Flash altogether.
Oh! And their forum software sucks, too. My screen name isn't supposed to be "BubbaJoeBlow." It's supposed to be "D'Hag," which was registered with my account. But the forum wouldn't let me use it. Great job, Adobe!
Message was edited by: Me

McAfee: selective scan

I want to run a security scan on a CD that someone has sent me. In "BT NetProtect Plus", "McAfee Secure" includes options for scanning selected parts of a computer or selected types of file etc. So far, so good, but if I select only the F: drive (i.e. the drive that contains the CD to be tested), McAfee starts scanning my hard disc (starting with C:\Windows\... even though I have most definitely "checked" only the F: drive!
Is there something wrong with my installation of McAfee Secure, or is there something else that I ought to do to run a selective scan?
Solved!
Go to Solution.

Hi Chitinman50,
Welcome to the forum.
I came across a help article on BT.com that I thought may help. Please take a look at this How do I scan my computer for viruses?.
I think if you follow the manual scan instructions you will be able to achieve what you want. Please let me know if you still have problems after trying this?
Cheers
Sean
BTCare Community Manager
If we have asked you to email us with your details, please make sure you are logged in to the forum, otherwise you will not be able to see our ‘Contact Us’ link within our profiles.
We are sorry that we are unable to deal with service/account queries via the private message(PM) function so please don't PM your account info, we need to deal with this via our email account :-)

Automating McAfee Virus Scan Exclusions

Similar Messages

Maybe you are looking for